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AMENDMENT TO THE CLAIMS 
Please amend the presently pending claims as follows: 

1. (Currently Amended) Risk management software embodied upon a computer-readable 
medium, the software comprising a set of instructions for the following steps to be performed 
when the software is executed: 

a) accessing , from a project data store, project data comprising a plurality of action 
identifiers in a nested arrangement , each of which identifies a separate action to be 
performed; 

b) analysing the project data to identify a plurality of activities , ordered in a nested 
arrangement, each activity being thereby linked to at least one of the actions, wherein to 
at least some of the plurality of activities which is assigned at least one risk indicator, the 
at least one risk indicator identifjdng consequences of a risk on the activity; 

c) on the basis of one or more mitigating tasks identified to reduce or prevent the risk or the 
consequences of the risk, outputting to the project data in the project data store one or 
more new action identifiers or alterations to existing action identifiers in the project data^ 
and adjusting the nested arrangement of the action identifiers accordingly ; and 

d) accessing changes to the project data and revising the plurality of activities in dependence 
on whether the changes are to action identifiers in the project data resulting from step 
c)above. 

2. (Previously Presented) Risk management software as claimed in claim 1, wherein the 
changes to the project data are compared with new action identifiers or alterations to existing 
action identifiers previously output to the project data and where the changes to project data 
relate to action identifiers previously output to the project data no revisions are made to the 
plurality of activities. 
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3. (Original) Risk management software as claimed in claim 1, comprising the step of receiving 
a trigger from the project data when the project data has been changed. 

4. (Original) Risk management software as claimed in claim 1, comprising the step of 
periodically polling the project data to determine whether changes have been made to the project 
data. 

5. (Original) Risk management software as claimed in claim 1, comprising the further step of 
automatically outputting a message to one or more predetermined recipients. 

6. (Previously Presented) Risk management software as claimed in claim 5, comprising the 
further step of automatically outputting a message to one or more predetermined recipients when 
the consequences of the risk are identified as exceeding a selected threshold. 

7. (Original) Risk management software as claimed in claim 5, wherein the message is 
automatically output when the processor receives notice of an impacted risk. 

8. (Previously Presented) Risk management software as claimed in claim 1, wherein the risk 
indicator comprises one or more of a cost allowance and a time allowance. 

9. (Currently Amended) Risk management apparatus comprising a risk processor; means for 
linking the risk processor to a risk data store; a project data interface for linking the risk 
processor to a second store containing project data; and a program store containing a set of 
instructions for performing the following functions: 

a) accessing project data in the second store, the project data comprising a plurality 
of action identifiers in a nested arrangement , each of which identifies a separate 
action to be performed; 

b) analysing the project data to identify a plurality of activities , ordered in a nested 
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arrangement, each activity being thereby linked to at least one of the actions, 
wherein to at least some of the plurality of activities is assigned at least one risk 
indicator, the at least one risk indicator identifying consequences of a risk on the 
activity, and storing the plurality of activities in the risk data store; 

c) on the basis of one or more mitigating tasks identified to reduce or prevent the 
risk or the consequences of the risk, outputting to the second store one or more 
new action identifiers or alterations to existing action identifiers in the project 
data , and adjusting the nested arrangement of the action identifiers accordingly ; 
and 

d) accessing changes to the project data and revising the plurality of activities stored 
in the risk data store in dependence on whether the changes are to action 
identifiers in the project data resulting from step c) above. 

10. (Original) Risk management apparatus as claimed in claim 9, wherein the risk data store and 
the second store utilise the same database. 

11. (Original) Risk management apparatus as claimed in claim 9, further comprising a network 
interface for connecting to the second store when located at a remote site. 

12. (Original) Risk management apparatus as claimed in claim 9, wherein the functionality of 
the apparatus is divided into at least three parts: a presentational part for managing the 
presentation of risk information to a user of the apparatus; a logic part for analysing the project 
data and for generating and updating the contents of the risk data store; 

and an interface part for enabling communication of the apparatus with external applications and 
wherein the presentational part and the interface part are restricted to only interfacing internally 
with the logic part. 

13. (Previously Presented) Risk management apparatus as claimed in claim 12, wherein the 
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apparatus includes a fourth part comprising a risk data store interface which is permitted to 
interface with both the logic part and the interface part. 

14. (Currently Amended) A risk management method for storing and updating risk 
information, comprising the steps of: 

a) accessing , from a project data store, project data comprising a plurality of action 
identifiers in a nested arrangement , each of which identifies a separate action to be 
performed; 

b) analysing the project data to identify a plurality of activities , ordered in a nested 
arrangement, each activity being thereby linked to at least one of the actions, 
wherein to at least some of the plurality of activities is assigned at least one risk 
indicator, the at least one risk indicator identifying a consequence of a risk on the 
activity; 

c) on the basis of one or more mitigating tasks identified to reduce or prevent the 
risk or the consequences of the risk, outputting to the project data in the project 
data store one or more new action identifiers or alterations to existing action 
identifiers in the project data , and adjusting the nested arrangement of the action 
identifiers accordingly ; and 

(d) accessing changes to the project data and revising the plurality of activities in 
dependence upon whether the changes are to action identifiers in the project data 
resulting from the step (c) above. 

15. (Currently Amended) Integrated project management and risk management apparatus 
comprising: 

a project data store containing a plurality of inter-related action identifiers in a nested 
arrangement , each of which identifies a separate project action; 

a risk data store containing a plurality of inter-related project activities , ordered in a 
nested arrangement, each project activity being thereby being linked to at least one of related to 
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said project actions, and a plurality of risk indicators associated with said project activities, each 
risk indicator identifjdng a consequence of a risk on the activity; and 

a risk processor in communication with said project data store and said risk data store, 
said risk processor being operable to: 

read project action identifiers from said project data store; 

read project activities and associated risk indicators from said risk data store; 

generate and write to said risk data store changes to said project activities and risk 
indicators to reflect the project action identifiers read from the project data store; 

generate or receive, and write to said risk data store, one or more mitigating activities 
identified to reduce or prevent the risk or the consequences of the risk associated with a project 
activity; and 

generate and write to the project data store one or more new project action identifiers, or 
alterations to existing project action identifiers, corresponding to the mitigating activities 
generated or received , and adjust the nested arrangement of the action identifiers accordingly . 

16. (Original) The apparatus of claim 15 wherein the risk processor is operable to identify and 
thereby not to further process changes in the project data which were generated by the risk 
processor. 

17. (Currently Amended) A method of operating an integrated project management and risk 
management apparatus comprising a project data store containing a plurality of inter-related 
action identifiers, each of which identifies a separate project action, a risk data store containing a 
plurality of inter-related project activities related to said project actions and a plurality of risk 
indicators associated with said project activities, each risk indicator identifjdng a consequence of 
a risk on the activity, and a risk processor in communication with said project data store and said 
risk data store, the method comprising the steps of operating said risk processor to: 

read project action identifiers , which are in a nested arrangement, from said project data 

store; 
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read project activities and associated risk indicators from said risk data store , the project 
activities ordered in a nested arrangement, wherein each project activity is thereby linked to at 
least one of the project actions ; 

generate and write to said risk data store changes to said project activities and risk 
indicators to reflect the project action identifiers read from the project data store; 

generate or receive, and write to said risk data store, one or more mitigating activities 
identified to reduce or prevent the risk or the consequences of the risk associated with a project 
activity; and 

generate and write to the project data store one or more new project action identifiers, or 
alterations to existing project action identifiers, corresponding to the mitigating activities 
generated or received , and adjust the nested arrangement of the project action identifiers 
accordingly . 

18. (Currently Amended) A computer program product embodied on a computer-readable 
medium, the program product being for use in an integrated project management and risk 
management apparatus, and comprising: 

a project data store containing a plurality of inter-related action identifiers in a nested 
arrangement , each of which identifies a separate project action; 

a risk data store containing a plurality of project activities , ordered in a nested 
arrangement, each project activity being thereby being linked to at least one of related to said 
project actions and a plurality of risk indicators associated with said project activities, each risk 
indicator identifying a consequence of a risk on the activity; 

and a risk processor in communication with said project data store and said risk data 
store, said computer program product comprising computer program instructions which, when 
executed by said risk processor, carry out the method steps of claim 18 comprising: 
reading action identifiers from said project data store; 

reading project activities and associated risk indicators from said risk data store; 

generating and writing to said risk data store changes to said project activities and risk 
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indicators to reflect the action identifiers read from the project data store; 

generating or receiving, and writing to said risk data store, one or more mitigating 

activities identified to reduce or prevent the risk or the consequences of the risk associated with a 
project activity; and 

generating and writing to the project data store one or more new action identifiers, or 

alterations to existing action identifiers, corresponding to the mitigating activities generated or 
received, and adjusting the nested arrangement of the action identifiers accordingly . 



